
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/08B1BF36194E11F19D5A7EC83E3D8C67.roa
File: 08B1BF36194E11F19D5A7EC83E3D8C67.roa (raw, json)
Hash identifier: wBeeu2EnowEToOry+GUawfQ0n++Qcg+cnvESrpW7BdM=
Subject key identifier: 0D:0C:34:CE:86:BC:65:96:D3:D8:1D:0B:02:92:EE:C5:FA:2F:41:A9
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 067E
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/08B1BF36194E11F19D5A7EC83E3D8C67.roa
Signing time: Mon 06 Jul 2026 17:54:05 +0000
ROA not before: Mon 06 Jul 2026 17:54:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132912
IP address blocks: 151.158.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Jul 6 17:54:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bebbd-359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:19:e5:7b:16:df:71:44:12:aa:4e:83:fd:
a4:b5:01:54:29:43:e4:ee:a1:b4:5f:de:c6:25:5c:
0f:f2:a6:3a:16:ce:ce:69:ab:e0:76:2d:82:40:87:
a7:8f:be:6f:08:93:92:0a:c4:28:4e:9a:26:69:82:
fd:d2:4c:9d:62:e9:ad:db:b8:f2:d2:ce:d1:b5:dd:
40:7f:b1:37:2e:16:4c:84:aa:39:f5:a9:64:42:76:
0c:ca:f5:1b:44:5a:83:ca:ed:43:f7:06:e8:53:e0:
54:36:4d:e0:b7:07:29:7a:18:fe:a2:de:73:26:7d:
2a:57:fb:5c:19:d1:9f:bb:41:48:3d:81:c7:60:11:
e3:d7:6d:04:97:38:01:4c:c2:8e:bb:53:7f:67:93:
74:06:a1:63:8e:09:34:f0:64:6a:93:63:ef:73:4f:
1c:ac:cf:b2:f1:c5:aa:43:76:d9:0f:ff:f6:bb:c1:
7a:77:09:8a:d3:58:7a:db:03:22:72:47:cb:00:ed:
b9:21:0e:fe:d2:1c:3e:72:95:12:d4:8a:0f:69:54:
ff:d6:43:21:80:04:1f:93:18:cf:92:80:81:7a:bc:
94:0f:47:8b:bf:94:cc:25:da:22:34:d4:ff:85:f0:
5c:54:af:96:e3:1a:a5:1c:7d:2d:54:8a:5e:5e:d5:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:34:CE:86:BC:65:96:D3:D8:1D:0B:02:92:EE:C5:FA:2F:41:A9
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/08B1BF36194E11F19D5A7EC83E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:93:35:c6:20:78:48:a9:0f:24:f6:ed:e5:3d:9a:5f:67:b7:
03:17:37:72:e4:e5:72:4f:82:65:97:ab:0c:9c:88:6b:24:a0:
35:12:ec:e7:ba:d4:e9:a5:d7:26:a5:d8:a4:98:92:2f:bb:b6:
3b:1b:d2:c9:4c:52:fe:10:47:62:b2:58:ff:6e:5d:97:6c:36:
44:eb:eb:b2:32:68:4d:4c:ad:ad:33:21:63:a5:38:69:28:f2:
87:c5:d5:c8:f3:0d:69:04:a1:3e:be:82:70:6c:27:09:15:48:
91:74:ba:ef:fb:ee:b6:b2:5f:d3:eb:f1:7c:78:d2:2f:2d:cc:
af:26:26:9e:98:37:18:2d:1d:3e:f6:a9:11:d9:b0:41:d0:a3:
85:a1:c3:8c:99:65:93:74:36:21:3e:4e:d9:98:3e:f9:b9:32:
d7:93:d4:c3:04:8a:e5:f6:92:0a:e8:9a:3e:21:9a:e4:f4:95:
86:30:51:91:df:21:e6:f3:b5:5c:39:ec:b8:73:91:12:4a:be:
40:ed:e5:62:25:a7:fd:fa:c5:75:4e:6a:d6:6d:f8:53:af:da:
96:83:57:11:53:aa:5f:d4:b7:09:4b:6a:f1:20:4d:73:b9:12:
29:96:52:a6:41:57:22:b6:af:8f:9b:3f:e3:d1:1d:04:b7:1a:
67:0e:4c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:03:30 2026 by rpki-client